$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer File: b02b2a27-63d2-435f-8114-d98e289edc6c.cer (raw, json) Hash identifier: lLhFoUkbP41B6TouuCitUtwhfxQVvw3hGfEYHEGBEhQ= Subject key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584FCB59A9CCBDCB450584D4DF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Nov 2026 13:45:12 +0000 Certificate not after: Mon 12 Feb 2029 13:45:12 +0000 Subordinate resources: AS: 36230 IP: 204.110.218.0/23 IP: 208.71.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cb:59:a9:cc:bd:cb:45:05:84:d4:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 10 13:45:12 2026 GMT Not After : Feb 12 13:45:12 2029 GMT Subject: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:70:c7:03:ef:48:1c:95:22:22:b5:8a:90: 98:76:bd:2f:61:cc:0e:d8:df:78:4d:f1:bb:f9:aa: fc:3f:15:5f:44:f0:e1:10:8e:ce:5e:ab:b5:98:44: 06:98:ed:1f:32:ba:9e:43:9d:54:0c:63:8a:d6:7f: da:0d:4f:bd:65:03:0a:c6:50:95:76:8d:49:2a:de: 0e:d4:86:fb:df:ae:08:30:85:cb:3c:f8:be:d7:fd: 07:00:d6:f9:d7:40:7f:53:b3:89:8d:a8:2f:67:e5: 10:c7:42:d8:7b:13:06:5e:81:e3:ba:5b:3c:bb:e5: d1:fd:2e:3b:24:7c:5f:30:1a:a4:91:45:de:96:a6: 02:64:4d:d8:e5:03:43:47:02:de:7f:46:55:2a:40: d9:90:3b:ef:25:a6:72:c0:b3:78:f1:b7:1f:fd:77: b4:94:71:f2:d0:71:13:4d:36:fb:9c:be:97:1a:ed: 06:53:20:f1:ac:52:fc:d6:28:68:d5:6f:ae:18:df: b6:b2:0d:ee:ec:a6:97:e6:6c:a5:f2:ee:81:ac:00: 67:13:2c:86:3e:2a:0c:ad:81:b4:b5:e8:2b:c5:a1: 31:b8:0d:a8:58:c3:55:ea:04:e5:b3:f2:a4:74:ff: ac:d8:7a:ed:0f:4d:19:1d:fe:0a:15:31:cb:2c:1a: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.110.218.0/23 208.71.208.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36230 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:20:a5:ea:23:cb:5f:ef:2b:28:82:e6:24:d7:61:81:1b:de: 0f:22:af:c7:d0:6e:12:d8:4e:53:f3:27:dd:f9:47:ad:8e:a0: a3:d9:67:67:f7:35:13:c4:aa:e9:55:1b:26:dc:4e:36:40:b8: 5f:e2:fd:ac:5c:5c:67:7e:91:64:7f:d1:57:ac:19:9a:0b:7a: 92:95:f5:51:a9:ff:cc:77:6e:52:8f:f5:db:6d:6c:00:4f:af: fa:63:f4:23:f3:ef:39:31:df:b3:89:b6:a7:d8:00:c2:c9:1a: c0:56:6f:5b:35:5d:a1:7a:c0:99:d6:61:14:17:b7:0e:13:88: c1:1c:d8:82:92:38:15:15:0d:b4:f7:b2:38:b1:c8:1c:c8:f6: 0e:a1:7a:cd:6a:3e:4b:9a:04:b9:bc:11:26:47:5c:5d:1b:7c: af:26:27:b9:e5:b1:5b:5f:b0:46:a3:2c:75:c1:21:5c:1e:2c: f4:c5:c0:25:28:c8:fc:67:77:c7:66:0b:e5:d0:65:4b:92:72: 87:71:95:0b:0f:9d:9a:9a:23:4c:d1:dc:e5:59:06:f9:d5:2a: 4c:c0:57:7f:ae:4f:15:f3:1f:cc:6f:4c:ac:78:d7:ec:0b:1f: 5a:0b:79:29:7f:dc:be:e5:57:90:67:d7:b0:bf:1e:34:21:da: 3d:33:66:ff -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE/LWanMvctFBYTU34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MTExMDEzNDUxMloXDTI5MDIxMjEzNDUxMlowLzEtMCsGA1UEAxMk YjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVkYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09pwxwPvSByVIiK1ipCYdr0vYcwO2N94TfG7 +ar8PxVfRPDhEI7OXqu1mEQGmO0fMrqeQ51UDGOK1n/aDU+9ZQMKxlCVdo1JKt4O 1Ib7364IMIXLPPi+1/0HANb510B/U7OJjagvZ+UQx0LYexMGXoHjuls8u+XR/S47 JHxfMBqkkUXelqYCZE3Y5QNDRwLef0ZVKkDZkDvvJaZywLN48bcf/Xe0lHHy0HET TTb7nL6XGu0GUyDxrFL81iho1W+uGN+2sg3u7KaX5myl8u6BrABnEyyGPioMrYG0 tegrxaExuA2oWMNV6gTls/KkdP+s2HrtD00ZHf4KFTHLLBr8MQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGj9EKl2+gmsRArP65VMsjK/NZHJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IwMmIyYTI3LTYzZDItNDM1Zi04 MTE0LWQ5OGUyODllZGM2Yy9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5 ZWRjNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHMbtoDBALQR9AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAI2GMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHYgpeojy1/vKyiC5iTXYYEb3g8ir8fQbhLYTlPz J935R62OoKPZZ2f3NRPEqulVGybcTjZAuF/i/axcXGd+kWR/0VesGZoLepKV9VGp /8x3blKP9dttbABPr/pj9CPz7zkx37OJtqfYAMLJGsBWb1s1XaF6wJnWYRQXtw4T iMEc2IKSOBUVDbT3sjixyBzI9g6hes1qPkuaBLm8ESZHXF0bfK8mJ7nlsVtfsEaj LHXBIVweLPTFwCUoyPxnd8dmC+XQZUuScodxlQsPnZqaI0zR3OVZBvnVKkzAV3+u TxXzH8xvTKx41+wLH1oLeSl/3L7lV5Bn17C/HjQh2j0zZv8= -----END CERTIFICATE-----Generated at Sun Nov 15 21:19:47 2026 by rpki-client